Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft
File:                     8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft (raw, json)
Hash identifier:          +IwMMnQePVNjhxLGXI1jJe/ip1wkDbvSgfjKd+BJb3Q=
Subject key identifier:   8F:30:B4:97:35:28:11:AE:32:A2:E8:34:69:BD:E9:E6:60:D3:E3:F5
Authority key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF
Certificate issuer:       /CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
Certificate serial:       56D202F5EB69C9CE90272D844A52AECF60D8421A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft
Manifest number:          0131
Signing time:             Mon 27 Apr 2026 10:31:18 +0000
Manifest this update:     Mon 27 Apr 2026 10:26:18 +0000
Manifest next update:     Thu 30 Apr 2026 16:43:18 +0000
Files and hashes:         1: 323430343a346563303a3a2f33322d3438203d3e20313338313339.roa (hash: A2G6b+fxTo20QvHK7lUw9boisWwmFFcOlzGIN95UCMI=)
                          2: 323430343a346563303a313a3a2f34382d3438203d3e20313338313339.roa (hash: X/C9vXKY/TY9dLHbewA4tddP0TItlp1o/B62rHS1ZLs=)
                          3: 3130332e3133332e3134362e302f32342d3234203d3e20313338313339.roa (hash: nNqPduu/JjsIMhgAQMQxpm1Co5pg16TuoWu2Q/HzWgA=)
                          4: 3130332e3133332e3134372e302f32342d3234203d3e20313338313339.roa (hash: aR62APrh1DccZKre5l7C6SLFps3TBPFdm3R3znGJ1fA=)
                          5: 3130332e3133332e3134352e302f32342d3234203d3e20313338313339.roa (hash: AZoy99OzaaD9x6sZSBHTE/6tOjO7s0t/ExrzVTGMWVY=)
                          6: 8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl (hash: 0BSi1+4QJC3WIWg9JOBalDNvSDzNpZMdAO8/vlTr0Oo=)
                          7: 3130332e3133332e3134342e302f32342d3234203d3e20313338313339.roa (hash: 4N3xCB2x4rBoMiXQaq1TIxjQcspdHHBn4voGBhoXwMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d2:02:f5:eb:69:c9:ce:90:27:2d:84:4a:52:ae:cf:60:d8:42:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF
        Validity
            Not Before: Apr 27 10:26:18 2026 GMT
            Not After : Apr 30 16:43:18 2026 GMT
        Subject: CN=8F30B497352811AE32A2E83469BDE9E660D3E3F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:65:56:c2:a4:c1:8f:da:b3:a2:58:86:d7:
                    5c:b9:f3:72:29:79:9f:f6:cc:f8:ce:bc:31:e1:67:
                    71:15:cc:40:03:a1:67:ca:35:b1:aa:12:4b:82:3b:
                    bd:82:d2:65:2f:6b:0c:15:df:2f:c4:04:ae:21:c3:
                    c5:35:7b:41:6f:a7:d9:08:c6:ef:a5:bf:77:b6:fb:
                    03:35:22:8e:1e:af:28:f3:78:37:eb:c8:a3:50:e8:
                    c3:ae:67:81:69:13:98:90:d6:dc:04:14:36:62:fb:
                    08:eb:33:a4:ad:84:ab:35:40:73:e3:d5:6b:24:1f:
                    c0:36:11:e4:b9:0c:91:65:67:dc:ba:89:a1:1b:ad:
                    51:ec:e7:6d:aa:7b:bd:99:ee:31:c0:0d:75:32:15:
                    1c:01:42:e0:c3:ce:f5:25:f4:ef:91:16:64:e9:0c:
                    45:af:ca:1e:79:b8:4b:80:29:c4:ab:4a:ab:b3:da:
                    3d:c7:f0:93:b9:7e:72:e1:f8:4d:db:a0:dc:29:21:
                    b2:91:b2:68:c6:75:10:10:a9:59:5f:9b:53:ac:d9:
                    ce:1f:07:ab:f5:42:8f:96:2a:a6:e5:30:dc:9e:50:
                    d0:95:9e:56:2d:b7:30:f4:45:93:d8:83:f8:ac:59:
                    0d:db:0b:be:f9:5c:d8:f4:f6:df:e7:c0:82:1a:61:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:30:B4:97:35:28:11:AE:32:A2:E8:34:69:BD:E9:E6:60:D3:E3:F5
            X509v3 Authority Key Identifier:
                keyid:8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:06:40:9d:47:54:90:48:e7:83:27:75:4c:e7:8d:39:04:15:
         7f:86:1f:76:04:de:d2:ef:7c:c2:4c:82:2e:7f:7c:51:94:28:
         8a:41:06:6f:0e:7e:e1:fd:78:23:d5:4f:55:1c:25:9c:87:e8:
         09:64:f5:05:3f:4f:fa:cc:54:f8:c3:98:ec:54:35:0e:fa:11:
         e5:9d:42:4c:96:4b:ec:c2:8d:9d:df:2a:4d:e9:fd:f8:fb:74:
         2a:1f:1f:42:6b:f7:6c:1e:36:09:8e:c5:f0:d0:15:ea:15:f2:
         0e:b1:ad:cc:06:e5:02:75:4a:93:e8:26:80:6c:02:58:16:47:
         9c:a1:99:c0:8f:35:a7:c2:e6:09:0f:fb:fd:24:86:a4:c3:f6:
         7c:a4:7b:6c:00:15:af:4b:50:4b:ef:04:c1:2a:fc:58:00:5a:
         26:e6:2f:62:26:96:9f:26:d1:4f:52:b6:c6:ec:cc:01:13:6e:
         40:58:69:5c:f0:a4:92:aa:b1:80:f1:2e:55:07:ce:54:c3:4e:
         17:0e:32:dc:ea:3b:0f:90:46:93:aa:0a:ba:7e:38:3b:5d:93:
         5a:f6:46:91:44:57:06:86:4b:7d:bc:8e:18:aa:1b:e7:dd:6f:
         3d:e4:d4:3a:6a:d6:59:22:20:60:89:ec:27:20:61:5c:2c:3f:
         e9:e2:91:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----